Limit user access (project privacy)

Camila Gomes_lqqerm

Hello!😊

I would like to ask a question about project privacy.

I currently have company-managed [standard] projects and all of them were created with Jira's default template (scrum).
I want to add some external users to my instance, but I don't want them to access all the projects we already have.

Is there any way to create a privacy layer on the Instance?
I tried by groups, but it wasn't enough to limit the view of project information.

can anybody help me?

Nic Brough -Adaptavist-

Jira permissions are permissive, not restrictive - that is they are configured by letting people in, not shutting them out.

Your projects are probably using permission schemes that say "Browse: All logged in users", or "Browse: Members of jira-users group"

You will need to change that, so that

• You have (at least) one group that represents internal users, and another external.  
• Add "Browse:  Jira-internal" to all the existing project permissions
• Add "Browse:  Jira-internal, Jira-external" to the new projects
• Remove the Browse permission that lets everyone see all projects from all permission schemes.

You could also do that with roles, or multiple groups.  But you need to remove the "let everyone in" no matter what.